Effective October 9, 2026
The short version: when you ask for a roof estimate through a contractor's website, we collect your name, contact details, and property address, measure your roof from satellite imagery, and share all of it with that contractor so they can follow up. That sharing is the service working as intended, not a side effect — and it happens because you asked for it. We do not sell your information to anyone, and there is no advertising here.
RoofSum is operated from Colorado, United States. This policy covers roofsum.com and the estimate tool embedded on contractors' websites.
If you request an estimate as a homeowner:
If you sign up as a contractor: your company name, work email, website domain, and the version of the Terms of Service you accepted and when (kept with your Stripe subscription). Payment happens on Stripe — full card numbers never reach us. Signing in works by emailed link, and a signed-in session uses a cookie.
We are not after sensitive information — health, finances, government IDs — and the forms never ask for it. Please do not type it into them.
To produce the estimate, to deliver your request to the contractor whose website you used, to send email related to your request or account, to bill contractors, and to operate, secure, and improve the service. Nothing else: no targeted advertising, no ad profiles, no automated decisions with legal effects.
The estimate tool itself sets no cookies. The only cookie we use is the session cookie that keeps a contractor signed in to their dashboard. There are no third-party cookies. Because we do no targeted advertising and sell no data, there is nothing here for a Global Privacy Control or Do Not Track signal to switch off — the answer those signals request is already the permanent state.
Email support@roofsum.com to see what we hold about you, correct it, get a copy of it, or have it deleted — whatever state you live in. We verify requests by confirming you control the email address on file, and we answer within 45 days. We will never treat you worse for exercising these rights.
Colorado residents have these rights by statute under the Colorado Privacy Act, plus a right to appeal: if we refuse a request, reply and say so, and a different reviewer will take a second look within 45 days. If you are still unsatisfied, you can contact the Colorado Attorney General.
About the contractor's copy: deletion on our side does not reach the copy the contractor already received — they are an independent business responsible for their own compliance. Our terms require them to honor your stop and delete requests, and we will help you contact them.
The service is not directed to children under 13, and we do not knowingly collect their information. If you believe a child's information reached us, email us and we will delete it.
Traffic is encrypted in transit, access to stored data is restricted, and sign-in tokens are stored hashed. No system is perfectly secure, so we promise care, not invulnerability — and if a breach affects your information, we will notify you as Colorado law and any other applicable law require.
On servers in the United States. If you use the service from somewhere else, your information is processed here.
If this policy changes materially, the new version will be posted here with a new effective date before it takes effect, and subscribed contractors will be emailed.
Questions about either document: support@roofsum.com.
Effective October 9, 2026 · Terms of Service · Privacy Policy